citrix netscaler gateway firmware

Name: citrix netscaler gateway firmware
Brand: citrix

productUS

cpe:2.3:o:citrix:netscaler_gateway_firmware:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

4critical11high16medium0low

updated 2026-10-26

vulnerabilities (31)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2019-19781US	critical9.8OT critical	100.0% (100th)	KEV	no fix	2019-12-27	4 versions
CVE-2020-8193US	medium6.5OT critical	88.3% (100th)	KEV	12.1-57.18	2020-07-10	4 versions
CVE-2020-8195US	medium6.5OT critical	33.0% (98th)	KEV	12.1-57.18	2020-07-10	4 versions
CVE-2020-8196US	medium4.3OT critical	26.3% (98th)	KEV	10.5-70.18	2020-07-10	4 versions
CVE-2017-17382US	medium5.9OT elevated	13.9% (97th)	Exploit	no fix	2017-12-13	4 versions
CVE-2020-8191US	medium6.1	23.5% (98th)	—	11.1-64.14	2020-07-10	4 versions
CVE-2020-8194US	medium6.5	10.8% (96th)	—	10.5-70.18	2020-07-10	4 versions
CVE-2018-7218US	critical9.8	6.16% (93rd)	—	no fix	2018-05-17	4 versions
CVE-2017-7219US	high8.8	4.86% (92nd)	—	no fix	2017-04-13	4 versions
CVE-2018-6810US	high7.5	4.36% (91st)	—	no fix	2018-03-06	4 versions
CVE-2018-6809US	critical9.8	4.14% (91st)	—	no fix	2018-03-06	4 versions
CVE-2015-5080US	high9.0	3.97% (90th)	—	no fix	2015-07-16	14 versions
CVE-2015-5538US	high10.0	3.15% (88th)	—	no fix	2015-09-17	3 versions
CVE-2017-14602US	high7.2	2.42% (84th)	—	no fix	2017-09-26	6 versions
CVE-2018-6808US	high7.5	2.33% (83rd)	—	no fix	2018-03-06	4 versions
CVE-2019-6485US	medium5.9OT elevated	2.31% (83rd)	—	no fix	2019-02-22	5 versions
CVE-2015-2829US	high7.8	1.98% (80th)	—	no fix	2015-05-12	2 versions
CVE-2020-8187US	high7.5	1.95% (80th)	—	12.0-62.10	2020-07-10	2 versions
CVE-2020-8197US	high8.8	1.82% (79th)	—	10.5-70.18	2020-07-10	4 versions
CVE-2017-17549US	medium5.9	1.57% (75th)	—	no fix	2017-12-13	4 versions
CVE-2019-12044US	high7.5	1.55% (75th)	—	11.1.59.10	2019-05-22	4 versions
CVE-2014-8580US	medium4.9	1.51% (74th)	—	no fix	2014-11-07	12 versions
CVE-2019-18225US	critical9.8	1.51% (74th)	—	no fix	2019-10-21	4 versions
CVE-2015-6672US	medium4.3	1.43% (73rd)	—	no fix	2015-09-17	3 versions
CVE-2020-8190US	high7.5	1.23% (69th)	—	10.5-70.18	2020-07-10	4 versions
CVE-2018-6811US	medium6.1	1.17% (67th)	—	no fix	2018-03-06	4 versions
CVE-2015-7998US	medium5.0	1.02% (63rd)	—	no fix	2015-11-17	2 versions
CVE-2015-7996US	medium5.0	1.02% (63rd)	—	no fix	2015-11-17	2 versions
CVE-2015-7997US	medium4.3	1.00% (62nd)	—	no fix	2015-11-17	2 versions
CVE-2020-8198US	medium6.1	0.97% (62nd)	—	10.5-70.18	2020-07-10	4 versions
CVE-2018-18517US	medium4.8	0.83% (57th)	—	10.5.69.003	2018-10-24	4 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')6 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor4 CVEs
CWE-287Improper Authentication4 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')3 CVEs
CWE-264CWE-2643 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer2 CVEs
CWE-20Improper Input Validation2 CVEs
CWE-284Improper Access Control2 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE31 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan